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AMKNDMET^ to THF CLAIMS: 

This listing of claims will replace all prior versions, and Estings, of claims in the 
application: 

1. (Original) A method of verifying that a host coupled to an IP network is authorised to 
use an IP address which the host claims to own, die IP address comprising a routing 
prefix and an interface identifier part, the method comprising receiving from the host one 
or more components, applying a one-way coding function to the or each component 
and/or derivatives of the or each component, and comparing the result or a derivative of 
the result against the interface identifier part of the IP address, wherein if the result or its 
derivative matches the interface identifier the host is assumed to be authorised to use the 
IP address and if the result or its derivative does not match the interface identifier the host 
is assumed not to be authorised to use the IP address. 

2. (Original) A method according to claim 1, wherein said components comprise a hash 
value being one of a sequence of related hash values. 

3 (Original) A method according to claim 1, wherein said component, comprise a public 
key or a digest of a public key generated by said host or obtained by said host from 
another authorised party or a fixed bit sequence of the same length. 

4 (Original) A method according to claim 1, wherein said components comprise an 
initial interface identifier which corresponds to or is derived from a link layer address 
the host, or a fixed bit sequence of the same length. 
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5 (Original) A method according to claim 1, wherein said components comprise an 
initial interface identifier which corresponds to or is derived from a link layer address of 
the host, or a zero bit sequence of the same lengm. 

6 (Original) A method according to claim 2, wherein said components comprise a 
counter value which identifies the position of the received hash value in said sequence. 

I 7 (Currently Amended) A method according to claim 2, wherein said-a.series of hash 
1 values are derived at the host by applying a one-way coding function to a seed value and 
a public key or a digest of the public key. 

8 (Original) A method according to claim 2, wherein said series of hash values are 
derived at the host by applying a one-way coding function to a seed and an initial 
interface identifier. 

9 (Original) A method according to claim 2, wherein said series of hash values are 
derived at the host by applying a one-way coding function to a seed, a public key or a 
digest of the public key, and an initial interface identifier. 

1 0 (Original) A memod according to claim 2, and comprising deriving a hash value from 
.he receive* bash value to provide a derivative to which the one-way coding function .s 
applied, the derived hash value being the last hash value in the sequence. 

1 1 (Original) A method according to claim 10, wherein in the event first IP address 
verification, the h*h value received If om the host is the hash value preceding the final 
hash value in the sequence and for each subsequent verificmioo process, the n«t 
previous hash value must be received. 
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12. (Withdrawn) A method of generating an IP address at a host, the IP address 
comprising a routing prefix and an interface identifier part, the method comprising 
generating the interface identifier part by applying a one-way coding function to one or 
more components, wherein said components include a hash value which is generated 
using a random number. 

13. (Withdrawn) A method according to claim 12, wherein the said hash value is 
generated by applying a one-way coding function to a combination of the random number 
and an initial interface identifier. 

14 (Withdrawn) A method according to claim 12, wherein the said hash value is 
generated by applying a one-way coding function to a combination of the random number 
and a public key or a digest of the public key. 

15 (Withdrawn) A method according to claim 12, wherein the said hash value is 
generated by applying a one-way coding function to a combination of the random 
number, an initial interface identifier, and a public key or a digest of the pubbc key. 

16 (Withdrawn) A method of avoiding the duplication of IP addresses in an IP network 
when a new host attaches to the network, the method comprising the steps of: 

generating an Interface Identifier at the new host by combining a component or 
components and/or derivatives of the component or components using a one-way codmg 
function, andusing the result of the coding Action or a derivative of s.d result as the 
interface identifier, the interface identifier formingpartof said IP address; 

sending a neighbour solicitation message from the new host to other ho,ts aheady 
attached to the access network; 
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receiving a neighbour advertisement message at the new host from each other host 
claiming to own said IP address, the or each neighbour advertisement message containing 
said components); and 

for each received neighbour advertisement message 

combining the component(s) and/or derivatives of the component(s) using said 
coding function; and 

comparing the result or a derivative of the result against the interface identifier 
part of the IP address, wherein if the result or the derivative matches the interface 
identifier the host from which the neighbour advertisement message is received is 
assumed to be authorised to use the IP address and if the result or its derivative does not 
match the interface identifier that host is assumed not to be authorised to use the IP 
address. 

17. (Currently Amended) A method of verifying that a host coupled to an IP network is 
authorised to use an IP address which the host claims to own, and that the host is able to 
receive data packets sent to that address, the method comprising: 

carrying out the method of fee nhnve first aspoot of the inventio n claim 1 to 
confirm that said host is authorised to use the IP address; 

sending a challenge to the host using said IP address as the destination address for 

the challenge; 

receiving a response from the host; and 

verifying that the received response is a correct response to the challenge. 

18. (Original) A method according to claim 17, wherein said challenge is a randomly 
generated number and the response comprises the challenge. 
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19 (Original) A method according to claim 1 7, wherein said challenge comprises said IP 
address concatenated with a randomly generated number, and the response composes the 
IP address concatenated with the challenge. 

20 (Original) A method according to claim 17, wherein said challenge is formed by 
applying a one-way coding function to said IP address concatenated with a randomly 
generated number, and the response is formed by applying a one-way coding functton to 
Hie IP address concatenated with the challenge. 

21. (Withdrawn) A method of authenticating a public key transmitted over an IP network 
from a first to a second host, the method comprising: 

at said first host, generating an interface identifier using said public key and 
combining the interface identifier with a routmg prefix to form an IP address for the first 

h<>St; t ^^ V m i l^^^^^'^^^ Ml ^^^ 
at said second node, verifying that said public key was the key used to generate 

said interface identifier. 

22 (Withdraw,) A mefirod of binding an IP address to a host, to IP address comprising 
a routing prefix and an interface identifier part, the method compnsmg: 

derivatives of me components using a coding inaction; and 

generating a certificate, signed with a private key of a pubfic-pnvate key pan: 
Woogmgmmeh^mecertificamcon^n.emmrfaceidendfier andones of sard 

verifiedbyreconstiucnngme interface identifier using.be contents of the certificate, and 
comparing the result against me tine interface identifier. 
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